统一身份认证与在线系统的实现对话

import jwt

from flask import Flask, request, jsonify

app = Flask(__name__)

SECRET_KEY = 'your-secret-key'

@app.route('/login', methods=['POST'])

def login():

username = request.json.get('username')

password = request.json.get('password')

# 假设这里进行用户名密码校验

if username == 'admin' and password == '123456':

payload = {'username': username}

token = jwt.encode(payload, SECRET_KEY, algorithm='HS256')

return jsonify({'token': token})

else:

return jsonify({'error': 'Invalid credentials'}), 401

@app.route('/protected', methods=['GET'])

def protected():

token = request.headers.get('Authorization')

if not token:

return jsonify({'error': 'Missing token'}), 401

try:

payload = jwt.decode(token, SECRET_KEY, algorithms=['HS256'])

return jsonify({'message': f'Welcome, {payload["username"]}!'})

except jwt.ExpiredSignatureError:

return jsonify({'error': 'Token expired'}), 401

except jwt.InvalidTokenError:

return jsonify({'error': 'Invalid token'}), 401

if __name__ == '__main__':

app.run(debug=True)